bmuller/mod_auth_openid — pull request #28 by marlonbaeten (2012-04-10 20:17:48+00:00)
Title: Added HttpOnly flag to cookie value to increase security

In order to prevent security issues like cross-site request forgery, the session cookie should be HTTP only.